Hello,
In recent kernels no default assignments of helpers is done anymore, iptables users need to use -j CT target, nft users need to add a helper object:
as I do not have the requitred nftables and kernel versions, I reactivated default assignment with
echo 1 > /proc/sys/net/netfilter/nf_conntrack_helper like described at the bottom of https://wiki.nftables.org/wiki-nftables/index.php/Setting_packet_connection_tracking_metainformation Regards Christoph -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html